[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fy_UcvApsI9G-KzyGAGxzGhd7fLIsQxGMjWpU-L01qJQ":3,"g5a-risk:CVE-2021-34428":266},{"success":4,"data":5,"meta":264},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":25,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":109,"references":110,"referencesCount":155,"weaknesses":156,"weaknessesCount":165,"isActivelyExploited":166,"cisaInfo":25,"otxData":25,"relatedBlogPosts":167,"seoMetadata":168,"configurations":193,"relatedVendorCves":262,"notableEvents":263},"CVE-2021-34428","What is CVE-2021-34428?","For Eclipse Jetty versions \u003C= 9.4.40, \u003C= 10.0.2, \u003C= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts this can result in a session not being invalidated. This can result in an application used on a shared computer being left logged in.","For Eclipse Jetty versions \u003C= 9.4.40, \u003C= 10.0.2, \u003C= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID...","2021-06-22T15:15:16.443","2023-11-07T03:35:59.567",3.5,"CVSS:3.1\u002FAV:P\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":25,"CVSSMetricV2":37,"CVSSMetricV40":25},[16,28],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":23,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","PHYSICAL","LOW","NONE","UNCHANGED",null,0.9,2.5,{"Source":29,"Type":30,"CVSSData":31,"ExploitabilityScore":36,"ImpactScore":27},"e51fbebd-6053-4e49-959f-1b94eeb69a2c","Secondary",{"Version":20,"VectorString":32,"AttackVector":21,"AttackComplexity":33,"PrivilegesRequired":23,"UserInteraction":34,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":23,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"CVSS:3.1\u002FAV:P\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N","HIGH","REQUIRED",2.9,0.4,[38],{"Source":17,"Type":18,"CVSSData":39,"BaseSeverity":22,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":25,"ObtainAllPrivilege":25,"ObtainUserPrivilege":25,"ObtainOtherPrivilege":25,"UserInteractionRequired":25},{"Version":40,"VectorString":41,"AccessVector":42,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":43,"IntegrityImpact":43,"AvailabilityImpact":23,"BaseScore":44,"BaseSeverity":25,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:N","LOCAL","PARTIAL",3.6,3.9,4.9,0.00963,[47,47,47,47,47,47,47],"Low",[51,56,61,66,69,72,75,78,81,84,89,93,97,100,103,106],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"eclipse","jetty","*","cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",{"vendor":57,"product":58,"version":59,"criteria":60,"vulnerable":4},"debian","debian_linux","10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",{"vendor":62,"product":63,"version":64,"criteria":65,"vulnerable":4},"netapp","active_iq_unified_manager","-","cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*",{"vendor":62,"product":67,"version":54,"criteria":68,"vulnerable":4},"e-series_santricity_os_controller","cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",{"vendor":62,"product":70,"version":64,"criteria":71,"vulnerable":4},"e-series_santricity_web_services","cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:web_services_proxy:*:*",{"vendor":62,"product":73,"version":64,"criteria":74,"vulnerable":4},"element_plug-in_for_vcenter_server","cpe:2.3:a:netapp:element_plug-in_for_vcenter_server:-:*:*:*:*:*:*:*",{"vendor":62,"product":76,"version":64,"criteria":77,"vulnerable":4},"santricity_cloud_connector","cpe:2.3:a:netapp:santricity_cloud_connector:-:*:*:*:*:*:*:*",{"vendor":62,"product":79,"version":64,"criteria":80,"vulnerable":4},"snap_creator_framework","cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:*",{"vendor":62,"product":82,"version":64,"criteria":83,"vulnerable":4},"snapmanager","cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",{"vendor":85,"product":86,"version":87,"criteria":88,"vulnerable":4},"oracle","autovue_for_agile_product_lifecycle_management","21.0.2","cpe:2.3:a:oracle:autovue_for_agile_product_lifecycle_management:21.0.2:*:*:*:*:*:*:*",{"vendor":85,"product":90,"version":91,"criteria":92,"vulnerable":4},"communications_element_manager","8.2.2","cpe:2.3:a:oracle:communications_element_manager:8.2.2:*:*:*:*:*:*:*",{"vendor":85,"product":94,"version":95,"criteria":96,"vulnerable":4},"communications_services_gatekeeper","7.0","cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:*",{"vendor":85,"product":98,"version":54,"criteria":99,"vulnerable":4},"communications_session_report_manager","cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:*",{"vendor":85,"product":101,"version":54,"criteria":102,"vulnerable":4},"communications_session_route_manager","cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:*",{"vendor":85,"product":104,"version":54,"criteria":105,"vulnerable":4},"rest_data_services","cpe:2.3:a:oracle:rest_data_services:*:*:*:*:-:*:*:*",{"vendor":85,"product":107,"version":54,"criteria":108,"vulnerable":4},"siebel_core_-_automation","cpe:2.3:a:oracle:siebel_core_-_automation:*:*:*:*:*:*:*:*",16,[111,116,120,123,126,129,132,135,139,143,148,152],{"url":112,"source":113,"tags":114},"https:\u002F\u002Fgithub.com\u002Feclipse\u002Fjetty.project\u002Fsecurity\u002Fadvisories\u002FGHSA-m6cp-vxjx-65j6","GitHub",[115],"Third Party Advisory",{"url":117,"source":118,"tags":119},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr67c4f90658fde875521c949448c54c98517beecdc7f618f902c620ec%40%3Cissues.zookeeper.apache.org%3E","Apache",[],{"url":121,"source":118,"tags":122},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr8a1a332899a1f92c8118b0895b144b27a78e3f25b9d58a34dd5eb084%40%3Cnotifications.zookeeper.apache.org%3E",[],{"url":124,"source":118,"tags":125},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frbefa055282d52d6b58d29a79fbb0be65ab0a38d25f00bd29eaf5e6fd%40%3Cnotifications.zookeeper.apache.org%3E",[],{"url":127,"source":118,"tags":128},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frddbb4f8d5db23265bb63d14ef4b3723b438abc1589f877db11d35450%40%3Cissues.zookeeper.apache.org%3E",[],{"url":130,"source":118,"tags":131},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fref1c161a1621504e673f9197b49e6efe5a33ce3f0e6d8f1f804fc695%40%3Cjira.kafka.apache.org%3E",[],{"url":133,"source":118,"tags":134},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frf36f1114e84a3379b20587063686148e2d5a39abc0b8a66ff2a9087a%40%3Cissues.zookeeper.apache.org%3E",[],{"url":136,"source":137,"tags":138},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20210813-0003\u002F","Netapp",[115],{"url":140,"source":141,"tags":142},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2021\u002Fdsa-4949","Debian",[115],{"url":144,"source":145,"tags":146},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpuapr2022.html","Oracle",[147,115],"Not Applicable",{"url":149,"source":145,"tags":150},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpujan2022.html",[151,115],"Patch",{"url":153,"source":145,"tags":154},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpuoct2021.html",[151,115],12,[157],{"id":158,"name":159,"description":160,"extendedDescription":161,"status":162,"abstraction":163,"structure":164},"CWE-613","Insufficient Session Expiration","According to WASC, \"Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization.\"","","Incomplete","Base","Simple",1,false,[],{"title":169,"metaDescription":170,"keywords":171,"canonicalUrl":172,"structuredData":173},"What is CVE-2021-34428? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-34428, a low severity cyber security vulnerability from 2021. For Eclipse Jetty versions \u003C= 9.4.40, \u003C= 10.0.2, \u003C= 11.0.2, ...","CVE-2021-34428, CVE-2021-34428 vulnerability, CVE-2021-34428 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, eclipse security, debian security, netapp security, oracle security, jetty vulnerability, debian_linux vulnerability, active_iq_unified_manager vulnerability, e-series_santricity_os_controller vulnerability","\u002Fwhat-is\u002Fcve-2021-34428",{"@context":174,"@type":175,"headline":169,"description":170,"datePublished":10,"dateModified":11,"author":176,"publisher":180,"about":184,"mainEntityOfPage":188,"articleSection":191,"keywords":192},"https:\u002F\u002Fschema.org","TechArticle",{"@type":177,"name":178,"url":179},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":177,"name":178,"url":179,"logo":181},{"@type":182,"url":183},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":185,"name":6,"description":186,"additionalType":187},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":189,"@id":190},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-34428","Cybersecurity","CVE-2021-34428, CVE-2021-34428 vulnerability, CVE-2021-34428 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[194,210,216,239],{"Operator":25,"Negate":25,"Nodes":195},[196],{"Operator":197,"Negate":25,"CPEMatch":198},"OR",[199,202,206],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":200,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":201},"64EFBA84-EBA2-4A59-8739-D87727D15B61","9.4.40",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":203,"VersionStartExcluding":25,"VersionStartIncluding":204,"VersionEndExcluding":25,"VersionEndIncluding":205},"06C9A6EF-7194-4518-8460-47A0B712CA01","10.0.0","10.0.2",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":207,"VersionStartExcluding":25,"VersionStartIncluding":208,"VersionEndExcluding":25,"VersionEndIncluding":209},"4322454D-BEA1-4271-9622-7AD43CC126C9","11.0.0","11.0.2",{"Operator":25,"Negate":25,"Nodes":211},[212],{"Operator":197,"Negate":25,"CPEMatch":213},[214],{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":215,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",{"Operator":25,"Negate":25,"Nodes":217},[218],{"Operator":197,"Negate":25,"CPEMatch":219},[220,222,225,229,231,233,235,237],{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":221,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"F3E0B672-3E06-4422-B2A4-0BD073AEC2A1",{"Vulnerable":4,"Criteria":223,"MatchCriteriaID":224,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*","B55E8D50-99B4-47EC-86F9-699B67D473CE",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":226,"VersionStartExcluding":25,"VersionStartIncluding":227,"VersionEndExcluding":25,"VersionEndIncluding":228},"73F81EC3-4AB0-4CD7-B845-267C5974DE98","11.0","11.70.1",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":230,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"1AEFF829-A8F2-4041-8DDF-E705DB3ADED2",{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":232,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"214712B6-59AF-4B5E-84BF-AF3C74A390EA",{"Vulnerable":4,"Criteria":77,"MatchCriteriaID":234,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"AB15BCF1-1B1D-49D8-9B76-46DCB10044DB",{"Vulnerable":4,"Criteria":80,"MatchCriteriaID":236,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"9F4754FB-E3EB-454A-AB1A-AE3835C5350C",{"Vulnerable":4,"Criteria":83,"MatchCriteriaID":238,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"64DE38C8-94F1-4860-B045-F33928F676A8",{"Operator":25,"Negate":25,"Nodes":240},[241],{"Operator":197,"Negate":25,"CPEMatch":242},[243,245,247,249,253,256,259],{"Vulnerable":4,"Criteria":88,"MatchCriteriaID":244,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"97994257-C9A4-4491-B362-E8B25B7187AB",{"Vulnerable":4,"Criteria":92,"MatchCriteriaID":246,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"19EEAA04-A7BD-4FFF-8B0B-CEE5EC09F75C",{"Vulnerable":4,"Criteria":96,"MatchCriteriaID":248,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"062E4E7C-55BB-46F3-8B61-5A663B565891",{"Vulnerable":4,"Criteria":99,"MatchCriteriaID":250,"VersionStartExcluding":25,"VersionStartIncluding":251,"VersionEndExcluding":25,"VersionEndIncluding":252},"F80CB000-C477-486C-838C-B2FE82647670","8.0.0.0","8.2.4.0",{"Vulnerable":4,"Criteria":102,"MatchCriteriaID":254,"VersionStartExcluding":25,"VersionStartIncluding":255,"VersionEndExcluding":25,"VersionEndIncluding":252},"3E419C70-9516-4C63-997B-60B20E30A30D","8.0.0",{"Vulnerable":4,"Criteria":105,"MatchCriteriaID":257,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":258,"VersionEndIncluding":25},"2C134E13-D6B8-4F28-9EF0-C12BF8A380CF","21.3",{"Vulnerable":4,"Criteria":108,"MatchCriteriaID":260,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":261},"BEAB4771-C33C-4151-AEAE-A6D2C892C3C8","21.9",[],[],{"lastModified":11,"cacheTime":265,"version":40},1792239723969,{"score":267,"band":268,"action":269,"scoredAt":270},13,"Info","Track","2026-10-16T06:51:24.084565+00:00"]